CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, allowing local users to modify Word Perfect behavior by editing files in the working directory or to modify other users' files via a symlink attack.
The passwd command in Solaris can be subjected to a denial of service attack.
Buffer overflow in mkcookie for Solaris x86 allows local users to obtain root access.
The RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, allowing local users to gain administrator privileges.
The fte-console function in the fte package before version 0.46b-4.1 does not drop root privileges, allowing local users to gain root access via the virtual console device.
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe.
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems due to a malformed header type.
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing. This DLL logs user names and passwords in cleartext in the test.log file.
The BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Buffer overflow in the kcms_configure command in Solaris allows local users to gain root access.
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
Buffer overflow in NetMeeting allows remote command execution and denial of service.
Remote attackers can perform a denial of service attack using fcagent in IRIX.
Linux PAM modules allow local users to gain root access using temporary files.
CVE-1999-0478 vulnerability affects the sendmail service in HP-UX version 8.8.6, which is susceptible to a denial of service attack related to accepting connections.
Internet Explorer versions 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, known as frame spoofing.
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password at the beginning of the encrypted password, making it easier for attackers to guess passwords via brute force or dictionary attacks.
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, allowing local users to gain access to Excite accounts by modifying the file.